Privacy Policy
Effective date: 4 November 2025
Automorphic ("we", "us", "our") provides web-based products and services (the "Service"). This Privacy Policy explains what information we collect, how we use it, with whom we share it, and the choices you can make about your information. By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, do not use the Service.
Scope and applicability
This Privacy Policy applies to personal information collected through the Automorphic website and subdomains, client-facing APIs, integrations, and support channels. It does not apply to information that has been anonymized so that it does not identify an individual, or to third-party sites linked from our Service.
Definitions
Personal data or personal information means any information relating to an identified or identifiable natural person. Processing means any operation performed on personal data, including collection, storage, use, disclosure, and deletion. Controller means the entity that determines purposes and means of processing. Automorphic acts as controller for the processing described here unless otherwise stated.
Information we collect
Information you provide directly:
- Account registration: name, email address, password, billing address when applicable.
- Profile information: display name, organization, optional profile fields.
- User generated content: text, files, and other content you upload to or create with the Service.
- Communications and support requests.
Information collected automatically:
- Usage data: pages visited, features used, clicks, timestamps, session duration, errors, and performance metrics.
- Device and technical data: IP address, browser user agent, operating system, screen resolution, language, device identifiers.
- Cookies and similar technologies: persistent and session cookies, local storage, pixels.
Purposes of processing and legal bases
We process personal information to provide and maintain the Service, process payments, communicate with you, improve and develop features, comply with legal obligations, and send marketing communications where you have opted in. Where required by law, we rely on legal bases such as performance of a contract, legitimate interests, consent, or legal compliance.
Sharing and disclosure
We do not sell personal information. We may share personal information with service providers who perform functions for us such as hosting, payments, analytics, email, and customer support. We may disclose information to comply with legal process, to prevent fraud or illegal activity, to protect rights and safety, or in connection with a business transaction such as a merger or acquisition. Aggregated or de-identified information may be shared publicly.
Cookies and tracking
We use cookies and similar technologies to operate the Service, remember preferences, analyze trends, and serve content. Types of cookies include essential cookies required for operation, functional cookies to remember settings, analytics cookies to measure usage, and advertising cookies where applicable. You can control cookies via browser settings or opt out where provided, but disabling cookies may limit functionality.
Data retention
We retain personal information only for as long as necessary to fulfill the purposes described in this policy, to comply with legal obligations, to resolve disputes, and to enforce our agreements. When feasible we delete or anonymize data after retention periods expire.
Security
We implement reasonable administrative, technical, and organizational measures designed to protect personal information. Measures include encryption in transit, access controls, and monitoring. No system is completely secure, and we will follow applicable notification procedures in the event of a breach that creates a risk to your rights.
International transfers
Automorphic is a global service and personal information may be processed in jurisdictions outside your country of residence. We use appropriate safeguards such as standard contractual clauses or other lawful mechanisms to provide adequate protection for international transfers.
Your rights and choices
Depending on applicable law you may have rights including access, rectification, deletion, restriction or objection to processing, portability, and the right to withdraw consent where processing is based on consent. To exercise rights contact us at the address below. We may require verification and may limit requests as permitted by law.
Children
The Service is not directed to children under 16 and we do not knowingly collect personal information from children below the applicable minimum age. If we learn we have collected information from a child without required consent we will take steps to delete it.
Changes to this policy
We may update this Privacy Policy. We will post the revised policy with an updated effective date and where required by law we will provide advance notice for material changes. Continued use of the Service after updates indicates acceptance.
Contact
Controller: Automorphic. Contact email: example@automorphic.io. Mailing address: [Insert physical address if required by law].
Change Log
- 4 November 2025 - Initial publication